Two-Factor Authentication (2FA)

Two-Factor Authentication (2FA) is an additional layer of security for the Infinity Portal. When a Primary Administrator enforces 2FA, Infinity Portal users must use an authenticator application on a mobile phone to confirm their identities before they get access to the Infinity Portal. If the authenticator application does not work, users can use SMS for 2FA.

For information about 2FA for MSSPClosed Managed Security Service Provider (MSSP) - An managed security service provider (MSSP) provides outsourced monitoring and management of security devices and systems. Common services include managed firewall, intrusion detection, virtual private network, vulnerability scanning and anti-viral services./Distributor child accounts, see Manage Accounts.

To configure 2FA for your Infinity Portal user account

You can configure 2FA for your Infinity Portal user account in the Profile Settings page.

  1. Download one of these authenticator applications to your mobile phone:

    • Google Authentication

    • Microsoft Authenticator

    • Authy

  2. In the Infinity Portal, open the Profile Settings page. In the upper-right corner:

    • Click the user name, or

    • Click the arrow next to the user name > Profile Settings.

    The Profile Settings window opens.

  3. Optional - Verify your mobile phone number for 2FA:

    1. In the Phone field, enter your mobile phone number.

    2. Click Send code.

      Check Point sends an SMS to your phone with a six-digit code.

    3. Enter the code in the Enter Code field.

    4. Click Verify.

  4. Toggle the Two-factor Authentication (2FA) switch to ON.

    Note - When the switch is ON, you must use 2FA to log in to all Infinity Portal accounts to which you have access. When a Primary Administrator enforces 2FA for all users of the Infinity Portal account, the switch is ON by default and cannot be turned off.

    The Two-Factor Authentication (2FA) configuration wizard window opens.

  5. Follow the on-screen instructions to connect the authentication app with the Infinity Portal.

    Note - If you did not verify your phone number in the Profile Settings window, you must verify it in the Two-Factor Authentication (2FA) configuration wizard.

  6. Click Finish to close the wizard.

2FA enforcement settings in the Identity & Access page apply to all users of this Infinity Portal account. Only a Primary Administrator can change these settings.

  1. In the Infinity Portal, click > Identity & Access.

  2. In the Two-Factor Authentication (2FA) section, select when to enforce 2FA:

    A confirmation window opens.

  3. In the confirmation window, click Enforce.

Reset 2FA when a user loses access to an account or when you think that an unapproved individual gained access to the account. Resetting 2FA for a user requires the user to re-configure 2FA. Only a Primary Administrator can reset 2FA for a user.

  1. In the Infinity Portal, click > Users.

  2. Select a user that has 2FA configured. The 2FA column of the table shows which users have 2FA configured.

  3. From the top toolbar, click the Reset 2FA icon .

  4. In the window that opens, click Reset.

    Warning - This action cannot be undone.

    The next time the user tries to log in to the Infinity Portal, the user is re-directed to the Two-Factor Authentication wizard. To access the Infinity Portal, the user must complete the wizard and then use 2FA to log in.